Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...

POC2-CVE-2025-55182

React2Shell Ultimate - CVE-2025-66478 Scanner The most comprehensive scanner for Next.js RSC Remote Code Execution vulnerability root@kitploit: ╔════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | || / || | | | | ║ ║ | | / / |/ | | / /\ | ' \ / \ | | ║ ║ | / | |...

CVE-2025-55183-poc

CVE-2025-55183-poc – Next.js React Server Components Server Function Source Code Disclosure This repository contains detection tooling for a source code disclosure vulnerability in Next.js React Server Components RSC / Server Actions , tracked as CVE-2025-55183. In vulnerable applications, a...

CVE-2025-55183_POC

CVE-2025-55183 - Next.js RSC Server Function Source Code Disclosure A source code disclosure vulnerability in Next.js React Server Components RSC. A malicious HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function when the argument is...

React2Shell

🔐 React2Shell - Next.js RSC 污染 RCE 工具包 该 Python 工具包利用 Next.js React Server Components RSC 原型污染 + React.lazy-1 gadget 链实现完全 RCE 访问，包括交互式上帝 shell、文件上传（PHP webshell 植入器）以及通过 ?out= 进行数据外泄。 图片预览 🧾 main.py 📌 用途 自动检测与利用脆弱的 Next.js 应用（例如 target.com）。生成 uid=33www-data shell，支持: 通过 childprocess.execSync 实现...

Torito-R2S

Torito React2Shell: Escáner y Herramienta de Explotación CVE-2025-55182 / 66478 Escáner orientado a la detección para objetivos Next.js RSC con modos opcionales de confirmación de PoC y explotación/shell. Úselo solo en sistemas que esté autorizado a probar. Requisitos Python 3.9+ pip install -r...

RSC-Scanner-POC

Next.js RSC Source Code Disclosure Scanner A security scanner for detecting CVE-2025-55183 - Next.js React Server Components RSC source code disclosure vulnerability. Description This scanner detects source code disclosure in Next.js React Server Components RSC. A malicious HTTP request sent to a...

CVE-2025-55182-Terminal

Next.js RSC Vulnerability Scanner CVE-2025-66478 / CVE-2025-55182 A lightweight, multi-threaded Proof of Concept PoC tool designed to detect and demonstrate the Next.js React Server Components RSC Remote Code Execution vulnerability React2Shell. This tool allows for both single-target verificatio...

react2shell-scanner-rust

react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications. Install root@kitploit: cargo build --release Usage root@kitploit: ./scanner -u https://example.com ./scanner -l hosts.txt -t 20 -o results.json ./scanner -u https://example.com --crawl --max-depth 3...